Hunting for SharePoint In-Memory ToolShell Payloads

A walk-through showing how to analyze ToolShell payloads, starting with acquiring packets all the way to decoding embedded PowerShell commands.

https://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Hunting%20for%20SharePoint%20In-Memory%20ToolShell%20Payloads/32524

Android Security Bulletin December 2025

Google fixed numerous vulnerabilities with its December Android update. Two of these vulnerabilities are already being exploited.

https://source.android.com/docs/security/bulletin/2025-12-01

4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign

A group or individual released several browser extensions that worked fine for years until an update injected malicious code into the extension

https://www.koi.ai/blog/4-million-browsers-infected-inside-shadypanda-7-year-malware-campaign